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Top Stories 

• The U.S. Attorney’s office for the Eastern District of Pennsylvania announced charges 
against 3 individuals accused of allegedly orchestrating a $54.5 million Ponzi scheme for 
an alternative energy company September 3. - The Hill (See item 3 ) 

• A former Wellington man was convicted September 3 on 15 Federal mail fraud charges for 
allegedly soliciting dozens of investors for about $55 million that would purportedly be 
invested in oil in the Middle East. - South Florida Sun-Sentinel (See item 8) 

• Approximately 1,901 first responders in Fresno, California, reached 25-percent 
containment of the 81,549-acre Rough Fire September 3. - KFSN 30 Fresno (See item 19 ) 

• Sacramento City College was placed on lockdown for two hours and classes were canceled 
for the remainder of the day September 3, after one person was killed and two others 
injured by a gunman who shot the victims following a verbal dispute. - Associated Press 
(See item 21 ) 
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Energy Sector 



1. September 4, Columbus Dispatch - (Ohio) 36,000 lose power on Northeast Side after 
tree trimming. Approximately 36,000 residents on the Northeast Side of Columbus 
lost power for over 3 hours September 3 after American Electric Power crews 
accidentally disabled a power line while trimming trees, ultimately causing an outage at 
the Karl Road substation. 

Source: http://www.dispatch.com/content/stories/local/2015/09/03/aep-power.html 

2. September 4, Detroit Free Press - (Michigan) 29,000 without power after metro 
Detroit storms. Thunderstorms downed trees and power lines in metro Detroit August 
3, knocking out power to 57,000 customers. About 29,000 customers remained without 
power September 4. 

Source: http://www.freep.com/storv/news/local/michigan/2015/09/04/power-outages- 
metro-detroit- storms/7 16911 54/ 

3. September 3, The Hill - (Pennsylvania) Feds charge 3 in alleged green energy Ponzi 
scheme. The U.S. Attorney’s office for the Eastern District of Pennsylvania announced 
charges against 3 individuals accused of orchestrating a $54.5 million Ponzi scheme for 
an alternative energy company September 3. The suspects were charged with wire 
fraud, securities fraud and conspiracy to commit both in connection with Mantria 
Corp., a company which defrauded over 300 investors with false promises of 
sustainable and clean energy products. 

Source: http://thehill.com/policv/energv-environment/252658-feds-charge-3-in-alleged- 
green-energy-ponzi-scheme 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

4. September 4, Wilkes-Barre Citizen ’ Voice - (Pennsylvania) Susquehanna Nuclear 
plant requires special inspections. The U.S. Nuclear Regulatory Commission (NRC) 
reported September 3 that Talen Energy’s Susquehanna Nuclear plant in Salem 
Township will need to resolve its safety procedures after a June finding revealed the 
plant failed to notify State and local emergency responders of a potential steam leak, 
and inadequately stored excess combustible materials, among other findings. The NRC 
will conduct supplemental assessments at the plant’s Units 1 and 2 reactors. 

Source: http://citizensvoice.com/news/susquehanna-nuclear-plant-requires-special- 
inspections-1. 1936970 

Critical Manufacturing Sector 

5. September 3, U.S. Consumer Product Safety Commission - (National) Cycling Sports 
Group recalls Cannondale mountain bicycles due to fall hazard. Cycling Sports 
Group issued a recall September 3 for about 23,000 Cannondale bicycles with OPI 
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stem/steering tubes due to fall hazards posed by a potential failure in the stem/steering 
tube assembly. The products were distributed at Cannondale dealers nationwide from 
2010-2015. 

Source: http://www.cpsc.gov/en/Recalls/2015/Cvcling-Sports-Group-Recalls- 
Cannondale-Mountain-Bicycles/?utm 

6. September 3, WTAE 4 Pittsburgh - (Pennsylvania) Judge: PPG liable for Allegheny 
River pollution from plant. Federal authorities ruled August 31 that PPG Industries 
Inc., is liable for decades of Allegheny River pollution after violating State and Federal 
water and environmental conservation acts at the company’s Ford City glass 
manufacturing plant from 1949 - 1970. Local researchers reported that toxic runoff 
from plant dump site slurry lagoons contained toxic levels of arsenic, chromium, lead, 
manganese, copper, and mercury, among other substances. 

Source: http://www.wtae.com/news/iudge-ppg-liable-for-pollution-from- 
plant/35088604 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

7. September 3, Krebs on Security - (International) More ATM “Insert Skimmer” 
innovations. U.S. and European security researchers reported recent trends in ATM 
skimming, including devices being planted via a hidden “insert skimmer” placed 
through the ATM’s card reader, “wiretapping attacks” in which devices are installed 
via holes drilled near the card reader entry throat, and the use of solid explosives to 
blow open cash machines in 11 countries. 

Source: http://krebsonsecuritv.com/2015/09/more-atm-insert-skimmer-innovations/ 

8. September 3, South Florida Sun-Sentinel - (National) Socialite found guilty of mail 
fraud got $55M from victims, Feds say. A former Wellington man was convicted 
September 3 on 15 Federal mail fraud charges for allegedly soliciting dozens of 
investors for about $55 million that would purportedly be invested in oil in the Middle 
East, which he instead used to finance his lifestyle. The suspect was previously ordered 
to pay $112 million in damages and civilian penalties for selling fake investments. 
Source: http://www.sun-sentinel.com/local/palm-beach/fl-ioseph-zada-guiltv-verdict- 
20150903-story.html 

9. September 3, Orange County Register - (National) Counterfeit crimes in Seal Beach 
found to be part of nationwide scheme. U.S. Secret Service and California police 
authorities arrested 8 suspected gang members in Seal Beach September 3 in 
connection to a national counterfeiting scheme in which perpetrators allegedly used 
fake bills for over 4,200 transactions totaling $100,000 nationwide since 2013. The 
source of the counterfeiting is under investigation. 

Source: http://www.ocregister.com/articles/beach-680986-bills-seal.html 
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Transportation Systems Sector 



10. September 3, KPTV 12 Portland - (Oregon) Wilsonville woman dies in crash with 
school bus near Santiam Junction. Highway 20 near mile post 79 in Linn County was 
shut down for several hours while emergency crews responded to a fatal accident that 
killed 1 woman after her vehicle veered across the center line and slammed into a 
school bus carrying 43 members of the Sheldon High School soccer team September 3. 
The crash remains under investigation. 

Source: http://www.kptv.com/story/29955426/deadlv-crash-involving-car-school-bus- 
shuts-down-hwy-20-near-santiam-iunction 

11. September 3, WSB 2 Atlanta - (Georgia) Multi-car crash ties up traffic on 1-75 in 
Marietta. Several southbound lanes of Interstate 75 at the 120 loop in Marietta were 
shut down for several hours September 3 while crews cleaned up a multi-vehicle 
accident that injured 1 person. 

Source: http://www.wsbtv.com/news/news/local/multi-car-crash-ties-traffic-i-75- 
marietta/nnXhj/ 

12. September 3, Riverside Press-Enterprise - (California) San Bernardino Mountains: 
Overturned big-rig, fuel spill closes Highway 38 at Jenks Lake. Highway 38 at 
Jenks Lake Road in San Bernardino County was shut down for 2 hours September 3 
while crews cleared the scene of a 2-vehicle accident that involved a semi-truck and 
injured 1 person. 

Source: http://www.pe.com/articles/highwav-779051-crash-ienks.html 

Food and Agriculture Sector 

13. September 3, U.S. Food and Drug Administration - (National) Best Cash & Carry 
recalls Rose Brand Cranberry Mix because of possible health risk. Maspeth, New 
York-based Best Cash & Carry issued a recall for its Rose Brand Cranberry Mix 
product packaged in 7-ounce plastic bags September 2, after routine sampling revealed 
the presence of undeclared sulfites. The product was sold in New York, Connecticut, 
and New Jersey. 

Source: http://www.fda.gov/Safety/Recalls/ucm461250.htm 

14. September 2, U.S. Department of Labor - (Delaware) Deficient medical management 
leads to musculoskeletal injuries at Delaware poultry processing plant. The 
Occupational Safety and Health Administration sent Allen Harim Foods LLC in 
Harbeson Delaware, a hazard alert letter August 7, after an inspection revealed 
deficiencies in staffing, inadequate supervision, and deficiencies in the facility’s 
medical management program that may have contributed to the development of 
employee’ serious musculoskeletal disorders, among other findings. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28659 
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Water and Wastewater Systems Sector 



15. September 3, Chicago Tribune - (Kentucky) About 120,000 gallons of oil spill in 
Mississippi River after boats collide. The U.S. Coast Guard reported September 3 that 
a portion of the Mississippi river was closed from mile marker 938 to 922 while crews 
investigated an oil spill following a 2-tow boat collision near Columbus, Kentucky, 
that dumped more than 120,000 gallons of oil into the river September 2. Some oil was 
recovered, but officials are unsure of how much was released mid-channel. 

Source: http://www.chicagotribune.com/news/nationworld/midwest/ct-rnississippi- 
river-oil-spill-20150903-story.html 

For another story, see item 6 

Healthcare and Public Health Sector 

16. September 4, SC Magazine - (National) Encrypted medical databases shown to leak 
information. Researchers from Microsoft reported findings revealing that databases 
used to storage electronic medical records are prone to information leakage despite 
being encrypted, and that they were able to find data such as sex, race, age and 
admission information from real patient records from 200 hospitals in the U.S via 
frequency analysis, Ip-optimization, and sorting and cumulative attacks 

Source: http://www.scmagazineuk.com/encrvpted-medical-databases-shown-to-leak- 
information/article/436892/ 

17. September 3, U.S. Department of Labor - (New Jersey) OSHA cites Bergen Regional 
Medical Center after 8 employees assaulted or threatened by patients since 
February. The Occupational Safety and Health Administration cited Bergen Regional 
Medical Center August 1 8 for one general duty clause citation for failing to keep the 
work place free of hazards after an investigation revealed 8 incidents of workplace 
violence from February through June 2015 in which employees were assaulted or 
threated by patients. Proposed penalties total $13,600. 

Source: https://www.osha.gov/newsrelease/reg2-20150903.html 

18. September 3, KHOU 11 Houston - (Texas) HFD: Angry patient causes $1M in 
damage at Houston hospital. The Houston Fire Department reported September 3 that 
an angry patient at the Memorial Hermann Southeast in Houston allegedly started 2 
fires in a neighboring building, triggering the suppression system and causing over $1 
million in damages. The suspect was detained by police after existing the building. 
Source: http://www.khou.com/storv/news/crime/2015/09/03/man-arrested-after- 
allegedly-starting-fire— se-houston-hospital/7 16281 20/ 

Government Facilities Sector 

19. September 3, KFSN 30 Fresno - (California) Rough Fire crews work to protect trees, 
cabins, and historic monuments. Approximately 1,901 first responders in Fresno 
reached 25-percent containment of the 81,549-acre Rough Fire September 3, and were 
working to protect Converse Basin, the Buck Rock area, and Cedar Grove, along with 
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their cabins, landmarks, and historical monuments. 

Source: http://abc30.com/news/rough-fire-crews-work-to-protect-trees-cabins-and- 
historic-monuments/968 1 60/ 



20. September 4, Fox News - (National) Forest Service spent record $243M last week 
fighting western wildfires. The U.S. Agriculture Secretary reported September 3 that 
the U.S. Forest Service spent over $243 million in the week of August 24 battling over 
70 fires in 5 States, and that the agency expects spending on continued fire suppression 
to average about $200 million per week. 

Source: http://www.foxnews.com/us/2015/09/04/forest-service-spent-record-243m-last- 
week- fighting- western- wildfires/ 

21. September 4, Associated Press - (California) Gunman sought in Sacramento college 
shooting; 1 dead 2 injured. Sacramento City College was placed on lockdown for two 
hours and classes were canceled for the remainder of the day September 3 after one 
person was killed and two others injured by a gunman who shot the victims following a 
verbal dispute. Authorities continued to search for the suspect. 

Source: http://abc7chicago.com/news/gunman-sought-in-sacramento-college-shooting;- 
1 -dead-2-injured/969225/ 

22. September 4, WTAE 4 Pittsburgh - (Pennsylvania) Teen fatally struck by bus outside 
Founders Hall Middle School in McKeesport. A 15-year old McKeesport Founders 
Hall Middle School student was killed September 3 after being struck by a school bus 
in an intersection outside of the school. 

Source: http://www.wtae.com/news/pedestrian-struck-by-bus-in- 
mckeesport/35086194?utm source=dlvr.it&utm medium=twitter&utm campaign=wta 
e 

For another story, see item 10 

Emergency Services Sector 

23. September 3, KTLA 5 Los Angeles - (California; Tennessee; Illinois) Maximum- 
security inmate from San Diego prison escapes while being transported out of 
State. A Richard J. Donovan Correctional Facility official reported September 3 that an 
inmate serving a 17-year sentence for robbery in San Diego escaped at a rest stop on 
Interstate 80 outside of Princeton, Illinois, while being transported back after a court 
proceeding in Tennessee. Police crews were actively searching for the prisoner. 

Source: http://ktla.com/2015/09/03/maximum-securitv-inmate-from-san-diego-prison- 
escapes-while-being-transported-out-of-state/ 

24. September 3, Associated Press - (California) 3 California deputies arrested; inmate 
died of blunt trauma. Three Santa Clara jail guards were arrested September 3 after an 
inmate under their watch was found dead August 27 with multiple blunt force injuries, 
“visceral lacerations,” and internal bleeding. The guards were put on unpaid 
administrative leave pending an ongoing investigation. 

Source: http://www.ktvl.com/shared/news/top-stories/stories/ktvl vid 17461.shtml 
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25. September 2, Tampa Tribune - (Florida) Pinellas paramedic stole drugs, replaced 
them with saline, deputies say. A paramedic with S unstar Paramedics in Pinellas 
County was arrested September 2 and faces 7 counts of possession of a controlled 
substance and 7 counts of grand theft after stealing fentanyl, a synthetic opiate 
analgesic, and replacing it with saline 7 times over the course of 10 shifts. An 
investigation is ongoing, although officials say no patients received the tampered 
medication. 

Source: http://www.tbo.com/news/crime/pinellas-paramedic-stole-drugs-replaced- 
them-with-saline-deputies-say-20 150902/ 

Information Technology Sector 

26. September 4, Securityweek - (International) Cisco patches flaw in data center 
management products. Cisco released software updates addressing a remotely 
exploitable JavaServer Pages (JSP) vulnerability in the company’s UCS Director and 
Integrated Management Controller (IMC) Supervisor products which could allow an 
unauthenticated attacker to use specially crafted HyperText Transfer Protocol (HTTP) 
requests to overwrite arbitrary files, resulting in instability or a denial-of-service (DoS) 
condition. 

Source: http://www.securitvweek.com/cisco-patches-flaw-data-center-managernent- 
products 

27. September 4, Securityweek - (International) Flaws in OrientDB expose databases to 
remote attacks. The Computer Emergency Readiness Team (CERT) published an 
advisory warning of three vulnerabilities in OrientDB ’s Community Edition, including 
a cross-site request forgery (CSRF) affecting the Web administration interface in which 
an attacker could perform actions with user privileges, an insufficient random value 
issue that could allow an attacker to gain administrative privileges to the database, and 
an improper input validation that could allow an attacker to create specially crafted 
pages to launch clickjacking attacks. 

Source: http://www.securitvweek.com/flaws-orientdb-expose-databases-remote-attacks 

28. September 4, Softpedia - (International) FortiClient antivirus fixes system-level 
privilege escalation bug. FortiClient antivirus client developers released an update 
addressing a privilege escalation bug in the software that could have allowed an 
attacker who had previously infected the system to gain unauthorized access to system- 
level privileges. 

Source: http://news.softpedia.com/news/forticlient-antivirus-fixes-system-level- 
privilege-escalation-bug-490935.shtml 

For another story, see item 16 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 

29. September 4, KMOV 4 St. Louis - (Illinois) Large fire destroys Fairview Heights, 111. 
apartment building. Twenty-one residents from the Longacre Ponds Apartment 
complex in Fairview Heights, Illinois, were displaced September 2 after a 5 -alarm fire 
destroyed 8 units, prompting 5 fire departments to respond. The cause of the fire is 
under investigation after the building fire alarms never activated. 

Source: http://www.kmov.com/storv/29954550/large-fire-destroys-ofallon-ill- 
apartment-building 

30. September 4, WABC 7 New York City - (New Jersey) Cranford Daycare workers 
accused of fostering ‘fight club’ among kids in court. Two former employees at 
Lightbridge Academy in Cranford, New Jersey, were charged with fourth-degree child 
abuse, and third-degree endangering the welfare of a child September 2, after the 
employees instigated and encouraged a dozen children to fight. An investigation 
remains ongoing. 

Source: http://abc7ny.com/news/cranford-davcare-workers-accused-of-fostering-fight- 
club-among-kids-in-court/969741/ 

31. September 4, KSDK 5 St. Louis - (Missouri) Brentwood PetSmart reopens after 
chemical leak. The Banfield Animal Hospital inside a Brentwood, Missouri PetSmart 
was closed and evacuated September 3 after seven employees were sent to nearby 
hospitals when feeling symptoms of nausea, dizziness, and a metallic taste in their 
mouths. PetSmart is scheduled to remain closed until a complete inspection is 
complete. 

Source: http://www.ksdk.com/story/news/local/2015/09/03/brentwood-pet-smart- 
evacuated/71649364/ 



32. September 3, Wilmington News Journal - (Delaware) Bomb threat clears Hockessin 
daycare center. Approximately 60 children from the Children of America Child Care 
in Hockessin were evacuated for nearly 3 hours September 3 after daycare employees 
received a bomb threat by telephone. K-9 teams and police crews searched the building 
and found no explosive devices. 

Source: http://www.delawareonline.com/story/news/local/2015/09/03/bomb-threat- 
clears-hockessin-daycare-center/7 1 648044/ 
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33. September 2, U.S. Department of Labor - (Texas) Bowling center mechanic’s 
strangulation death a ‘preventable workplace tragedy.’ The Occupational Safety 
and Health Administration cited Brownsville, Texas-based Galaxy Bowling Center for 
10 serious safety violations September 2 after a part-time worker suffocated to death 
while repairing a faulty pinsetter. Proposed penalties total $50,400. 
Center https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS R 
ELEASES&p id=28662 

Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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